[Openswan dev] some minor NSS issue and openswan

[Paul Wouters]

On Mon, 3 May 2010, Avesh Agarwal wrote:

>> 
>> - README.nss is not shipped in openswan nor openswan-doc rpm - certutil is 
>> missing, should openswan depend on nss-tools ?
>> - man certutil gives: No manual entry for certutil
>> 
> Hello Paul,

> README.nss is shipped with openswan-doc in Fedora and RHEL.

rhel6 says there is no openswan-doc pacakage.

> Openswan is 
> dependent on nss if built with USE_LIBNSS, but not on nss-tools.

It should be, since you cannot really use any X.509 options without
generating a store and putting certs in it, which require nss-tools.

> I didnt see a manpage for certutil. But "certutil -h" or the link 
> http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html should 
> be helpful.

I was just whining about people who need to learn to document code :)

Paul